https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:48:03.180483+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-37818 cnvd-2017-37818 2026-10-02T20:48:03.248169+00:00 cnvd-2017-37818 https://cve.radiocsirt.org/vuln/euvd-2026-176277 EUVD-2026-176277 2026-10-02T20:48:03.248209+00:00 EUVD-2026-176277 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000168 fkie_cve-2017-1000168 2026-10-02T20:48:03.248224+00:00

sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

 https://cve.radiocsirt.org/vuln/ghsa-2wc6-2rcj-8v76 GHSA-2wc6-2rcj-8v76 — scalarmult() vulnerable to degenerate public keys 2026-10-02T20:48:03.248254+00:00

Affected: crates.io: sodiumoxide

The scalarmult() function included in previous versions of this crate accepted all-zero public keys, for which the resulting Diffie-Hellman shared secret will always be zero regardless of the private key used.

This issue was fixed by checking for this class of keys and rejecting them if they are used.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000168 gsd-2017-1000168 2026-10-02T20:48:03.248280+00:00 gsd-2017-1000168 https://cve.radiocsirt.org/vuln/rustsec-2017-0001 RUSTSEC-2017-0001 — scalarmult() vulnerable to degenerate public keys 2026-10-02T20:48:03.248292+00:00

Affected: crates.io: sodiumoxide

The `scalarmult()` function included in previous versions of this crate accepted all-zero public keys, for which the resulting Diffie-Hellman shared secret will always be zero regardless of the private key used.

This issue was fixed by checking for this class of keys and rejecting them if they are used.